This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa File: 40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa (raw, json) Hash identifier: SO+JlgrecYfMw5+jCO6+AbW2d8AVA2B2rKfKNGUmAe4= Subject key identifier: 77:D7:B9:61:93:FE:5C:A8:EC:37:68:81:02:9A:4F:BF:4A:D7:57:0B Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584C29BBF20DF74F999EFBAF8E00 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa Signing time: Fri 12 Dec 2025 14:00:38 +0000 ROA not before: Fri 12 Dec 2025 14:00:38 +0000 ROA not after: Thu 12 Mar 2026 13:00:38 +0000 asID: 396606 IP address blocks: 2620:74:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:29:bb:f2:0d:f7:4f:99:9e:fb:af:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Dec 12 14:00:38 2025 GMT Not After : Mar 12 13:00:38 2026 GMT Subject: CN=b7e9ed6f-1bc6-4c42-b12b-af0002ae8465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:27:c3:22:7d:c9:cc:6b:5a:68:21:43:92: f7:9c:68:c9:d7:f0:f4:28:29:28:e3:0b:a4:db:e0: c6:30:a3:13:70:a3:ae:58:6b:cb:82:d5:eb:d8:96: 28:04:11:00:be:a7:c7:7b:e4:66:f7:5c:98:06:5a: 12:df:5e:43:64:1f:42:92:ed:d8:78:59:48:ee:df: ac:da:41:4e:14:d1:dd:db:93:b5:75:4c:57:19:92: 58:fb:78:a0:58:b8:18:53:c3:a9:67:6b:7e:79:88: d9:9b:85:98:09:1f:80:97:b4:9d:3e:0b:c9:17:44: d2:df:a3:d5:d5:15:af:1a:ee:4c:db:77:8a:41:e2: 11:fb:de:f3:73:6b:0a:fa:42:cc:38:64:98:23:84: 02:bb:63:2b:b6:d0:96:c8:e0:22:4d:0e:01:d4:c9: 46:ff:c4:1c:98:85:c6:43:1a:93:8b:43:78:eb:bd: 94:55:f6:cf:3d:de:3a:b6:c6:a8:e3:ca:bb:82:3e: 1e:cc:11:1d:95:aa:b7:a1:ca:c9:d5:11:65:5f:db: d4:02:ff:37:40:9b:5f:bb:1c:15:5e:22:89:69:92: d1:bb:c3:64:bd:35:4b:1a:6d:5e:7e:47:75:31:1e: fb:49:e9:2e:50:c5:a7:f6:99:4b:bc:f7:ce:f1:9c: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D7:B9:61:93:FE:5C:A8:EC:37:68:81:02:9A:4F:BF:4A:D7:57:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/40e9ed5c-e53f-3624-b04c-23db14cb5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv6: 2620:74:2c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2f:48:c7:4f:05:02:15:76:c8:ba:56:a3:bf:52:4d:c5:0f: b0:59:c8:d7:ff:07:be:a4:a4:e9:2b:94:4b:87:4e:ce:43:b5: 1c:a6:b1:06:68:3f:cd:54:c7:bf:85:fe:21:cb:e6:2c:4f:f0: ea:f7:02:99:a9:e0:6a:06:09:fe:86:2e:ba:65:46:5d:0b:a8: 60:34:4a:d5:7d:d8:75:e6:b5:32:b3:9b:b6:73:71:11:25:1a: c6:e5:fc:31:63:e2:2a:35:d7:64:81:59:3f:81:72:06:65:d6: d0:e9:29:48:03:62:0b:3a:c7:31:98:d0:cb:98:cd:d2:5b:14: 92:29:7e:bc:2d:06:47:28:02:fe:aa:c0:db:76:3c:e8:9a:03: 1a:ee:73:92:28:c9:fb:53:24:88:fb:7e:d6:55:97:24:ac:75: 01:de:cf:99:69:2e:4d:94:d4:ab:63:cf:9c:1f:47:78:19:5f: 01:ad:28:78:5c:26:e6:5f:e5:48:7c:98:24:79:ad:3b:3d:dd: ce:5c:78:2f:98:5c:c9:2e:27:dd:65:ed:ba:31:33:2f:73:96: 25:8c:e4:c3:2c:5a:49:71:ac:80:6e:40:d8:04:e3:54:a8:79: 28:15:d0:d9:3f:72:f9:fc:96:aa:c8:f2:e4:b4:9a:ac:e5:19: 20:d4:b7:fe -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEwpu/IN90+ZnvuvjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MTIxMjE0MDAzOFoXDTI2MDMxMjEzMDAzOFowLzEtMCsGA1UEAxMk YjdlOWVkNmYtMWJjNi00YzQyLWIxMmItYWYwMDAyYWU4NDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeYnwyJ9ycxrWmghQ5L3nGjJ1/D0KCko4wuk 2+DGMKMTcKOuWGvLgtXr2JYoBBEAvqfHe+Rm91yYBloS315DZB9Cku3YeFlI7t+s 2kFOFNHd25O1dUxXGZJY+3igWLgYU8OpZ2t+eYjZm4WYCR+Al7SdPgvJF0TS36PV 1RWvGu5M23eKQeIR+97zc2sK+kLMOGSYI4QCu2MrttCWyOAiTQ4B1MlG/8QcmIXG QxqTi0N4672UVfbPPd46tsao48q7gj4ezBEdlaq3ocrJ1RFlX9vUAv83QJtfuxwV XiKJaZLRu8NkvTVLGm1efkd1MR77SekuUMWn9plLvPfO8ZyytwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHfXuWGT/lyo7DdogQKaT79K11cLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvNDBlOWVkNWMtZTUzZi0z NjI0LWIwNGMtMjNkYjE0Y2I1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAdAAs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQvSMdPBQIVdsi6VqO/Uk3FD7BZyNf/B76kpOkrlEuHTs5DtRym sQZoP81Ux7+F/iHL5ixP8Or3Apmp4GoGCf6GLrplRl0LqGA0StV92HXmtTKzm7Zz cRElGsbl/DFj4io112SBWT+BcgZl1tDpKUgDYgs6xzGY0MuYzdJbFJIpfrwtBkco Av6qwNt2POiaAxruc5IoyftTJIj7ftZVlySsdQHez5lpLk2U1Ktjz5wfR3gZXwGt KHhcJuZf5Uh8mCR5rTs93c5ceC+YXMkuJ91l7boxMy9zliWM5MMsWklxrIBuQNgE 41SoeSgV0Nk/cvn8lqrI8uS0mqzlGSDUt/4= -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:50 2025 by rpki-client